PT-2026-27050 · Sourcecodester · Simple E-Learning System

563742137Abc · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4573

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/form handlers/delete post.php of the component HTTP GET Parameter Handler. The manipulation of the argument post id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4573

Affected Products

Simple E-Learning System

References · 6

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Simple-E-learning-System/SQLi-DeletePost-postId.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4573 · Security Note
• https://vuldb.com/?id.352410 · Note
• https://vuldb.com/?ctiid.352410 · Note
• https://vuldb.com/?submit.775181 · Note
• https://sourcecodester.com · Note